[
https://issues.apache.org/jira/browse/YUNIKORN-3002?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17906927#comment-17906927
]
Tzu-Hua Lan commented on YUNIKORN-3002:
---------------------------------------
Hi, would like to take this issue. Thank you.
> Update Go dependencies for CVE fixes
> ------------------------------------
>
> Key: YUNIKORN-3002
> URL: https://issues.apache.org/jira/browse/YUNIKORN-3002
> Project: Apache YuniKorn
> Issue Type: Task
> Components: core - scheduler, shim - kubernetes
> Reporter: Wilfred Spiegelenburg
> Priority: Critical
>
> Apply changes for new CVE:
> * CVE-2024-45337: CRITICAL, not affected as we do not use SSH, just upgrade
> crypto to satisfy scanner, golang.org/x/[email protected]
> * CVE-2024-45338: HIGH, not affected as we do not use html parsing, just
> upgrade to satisfy the scanner golang.org/x/net#v0.33.0
> h3.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
